OS Command Injection in Azure Machine Learning - CVE-2026-109457
Published: November 10, 2026
Vulnerability identifier: #VU164730
CSH Severity: Medium
CVSS v4: 8.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-109457
CWE-ID: CWE-78
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to execute arbitrary code with another user's local permissions.
The vulnerability exists due to improper neutralization of special elements used in operating system commands in Azure CLI when connecting to jobs in a shared workspace. A remote user can use job submission permissions to submit a specially crafted job and convince another user to connect to it using Azure CLI to execute arbitrary commands with that user's local permissions.
Affected software
Azure Machine Learning
How to mitigate CVE-2026-109457
Install security update from vendor's website.
Azure Machine Learning - update to 2.45.1